$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft File: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft (raw, json) Hash identifier: c/p26NCz1po9ihXsMW++fCaDTf7xmefhKMfZwfyqFcs= Subject key identifier: 93:BA:97:C2:54:74:E8:8F:3F:FB:B5:04:42:70:A1:DF:DF:4F:DD:01 Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Certificate issuer: /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Certificate serial: 2FCCE59EDE9AF62BECBE939245CB92C5741B0008 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft Manifest number: A5 Signing time: Fri 05 Sep 2025 02:11:51 +0000 Manifest this update: Fri 05 Sep 2025 02:06:51 +0000 Manifest next update: Mon 08 Sep 2025 03:05:51 +0000 Files and hashes: 1: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: S22ChZGEvJ5gAYFztY/TYC839FBrS83Y5ZysrOVb4ss=) 2: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: jU/SQlHFg0i0t2XT427YG+4xTKw9TASNvTEDlba6svA=) 3: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl (hash: ce/xYL2DpnVODkKKHVqoJJVoenB+P9Ov2fk/JqJHVU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cc:e5:9e:de:9a:f6:2b:ec:be:93:92:45:cb:92:c5:74:1b:00:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Validity Not Before: Sep 5 02:06:51 2025 GMT Not After : Sep 8 03:05:51 2025 GMT Subject: CN=93BA97C25474E88F3FFBB5044270A1DFDF4FDD01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:cf:2a:54:c7:c1:74:c1:b7:45:0e:cc:db: 51:75:28:57:c5:bf:4e:7e:13:c3:4b:7a:94:26:b6: 06:81:42:37:8f:4b:92:99:2d:86:0d:36:8c:36:b1: 35:70:67:15:df:53:b9:60:60:80:2c:fb:40:94:69: a7:dd:3f:3d:8f:90:5a:9f:a1:b2:19:73:2d:05:53: 3c:1a:6f:8c:10:54:71:f6:e5:54:fd:a0:ca:c4:9e: 53:82:6d:4f:04:0f:53:d9:df:01:bd:61:e2:b9:47: 59:63:96:85:98:d9:24:e6:45:fe:26:a0:c1:80:31: 1e:46:50:80:d0:7e:8b:bd:75:59:58:14:aa:cb:1e: b3:ec:b5:a4:4e:99:6c:1f:65:8f:fd:75:6e:a0:9d: 00:d5:32:94:fe:19:00:0e:8a:b9:7d:38:7e:cf:23: 1e:02:4e:a7:fc:cc:ad:18:68:dd:44:6d:27:a6:d3: 69:85:45:9b:f4:af:d5:3e:9d:e4:b4:9b:03:16:aa: eb:cb:82:8e:e4:eb:f0:6c:53:d3:8a:40:d0:9e:c7: 28:24:26:7b:e9:5a:a8:a8:46:85:94:2d:72:94:ef: be:b6:37:ab:81:83:d2:b5:13:13:79:df:19:41:4d: 6f:3c:19:04:85:94:13:0a:e2:f5:d6:f2:94:ed:1d: 7b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BA:97:C2:54:74:E8:8F:3F:FB:B5:04:42:70:A1:DF:DF:4F:DD:01 X509v3 Authority Key Identifier: keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5a:8b:a4:c2:59:07:cd:be:32:ab:17:79:c6:0c:4f:f6:b0: e1:71:1c:48:60:27:22:9f:d3:eb:c1:ff:df:da:df:0d:32:e6: 19:a9:a5:71:a7:05:d5:ec:73:16:3f:81:1b:e3:e1:1c:03:d1: ad:25:8f:e4:1b:94:52:00:de:dd:58:e0:91:67:98:af:cb:72: 01:f9:63:7d:7f:01:d1:1c:f9:9f:50:ed:25:c4:54:44:ed:75: 3d:33:bd:af:5c:51:2a:2a:ae:58:3f:68:d5:2a:08:6a:49:c3: d6:e6:16:a9:6c:de:4a:47:32:4c:84:20:91:0e:8b:b0:00:03: 90:e0:27:a2:9c:eb:90:20:8e:03:fc:fd:0b:21:35:05:a1:cb: 83:c7:dc:2d:f3:f6:1a:3e:e0:a9:ed:a7:a0:e4:26:2a:cd:5b: a7:5d:65:a2:77:ac:39:17:e1:43:21:5c:95:59:fc:3d:a7:73: 48:97:cf:7c:df:af:8a:4b:0b:bf:d9:ba:1c:52:ea:96:d4:47: e5:3a:d4:ce:39:58:7a:6b:1d:6b:9f:78:1b:31:37:4a:17:27: d9:1e:f1:07:f6:0f:1b:73:aa:6f:dc:eb:cc:52:e3:a4:85:47: d0:08:6b:df:fb:d0:3d:7d:cc:04:60:87:2e:f9:fe:9b:b1:4b: 75:e2:33:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8zlnt6a9ivsvpOSRcuSxXQbAAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJD MzZDRUU2NTAeFw0yNTA5MDUwMjA2NTFaFw0yNTA5MDgwMzA1NTFaMDMxMTAvBgNV BAMTKDkzQkE5N0MyNTQ3NEU4OEYzRkZCQjUwNDQyNzBBMURGREY0RkREMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31c8qVMfBdMG3RQ7M21F1KFfF v05+E8NLepQmtgaBQjePS5KZLYYNNow2sTVwZxXfU7lgYIAs+0CUaafdPz2PkFqf obIZcy0FUzwab4wQVHH25VT9oMrEnlOCbU8ED1PZ3wG9YeK5R1ljloWY2STmRf4m oMGAMR5GUIDQfou9dVlYFKrLHrPstaROmWwfZY/9dW6gnQDVMpT+GQAOirl9OH7P Ix4CTqf8zK0YaN1EbSem02mFRZv0r9U+neS0mwMWquvLgo7k6/BsU9OKQNCexygk JnvpWqioRoWULXKU7762N6uBg9K1ExN53xlBTW88GQSFlBMK4vXW8pTtHXsnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk7qXwlR06I8/+7UEQnCh399P3QEwHwYDVR0j BBgwFoAU5IWKJhVHqsBlzflsIfiposNs7mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMC9FNDg1OEEyNjE1 NDdBQUMwNjVDREY5NkMyMUY4QTlBMkMzNkNFRTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJDMzZD RUU2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5 QTJDMzZDRUU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5ai6TCWQfNvjKrF3nGDE/2sOFxHEhgJyKf 0+vB/9/a3w0y5hmppXGnBdXscxY/gRvj4RwD0a0lj+QblFIA3t1Y4JFnmK/LcgH5 Y31/AdEc+Z9Q7SXEVETtdT0zva9cUSoqrlg/aNUqCGpJw9bmFqls3kpHMkyEIJEO i7AAA5DgJ6Kc65AgjgP8/QshNQWhy4PH3C3z9ho+4Kntp6DkJirNW6ddZaJ3rDkX 4UMhXJVZ/D2nc0iXz3zfr4pLC7/ZuhxS6pbUR+U61M45WHprHWufeBsxN0oXJ9ke 8Qf2Dxtzqm/c68xS46SFR9AIa9/70D19zARghy75/puxS3XiM40= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:38 2025 by rpki-client